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DETAILED ACTION 



Response to Arguments 



Applicant's arguments filed 8/6/03 have been fully 
considered but they are not persuasive. 

Applicant argued that there is no suggestion to combine 
Ericson with Yu because Ericson teaches a trusted environment; 
hence it is unncessary to add the security teaching of Yu to 
Ericson. The argument is not persuasive because Ericson clearly 
concerned with security and prevention of unauthorized access to 
the storage system by host devices over the network [see col . 1 
lines 62 to col. 2 lines 3]. Hence, the host devices in Erricson 
are not trusted device as argued by applicant. Both Erricson 
and Yu are directed to improving access security, hence they are 
analogous art. Yu specifically provides the motivation to 
combine by the advantage of his security method (see Yu col . 8 
lines 3-40) . Hence, the examiner has properly established a 
prima facie case of obviousness, 



The following is a quotation of 35 U.S.C. § 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is 
not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the 



Claim Rejections - 35 USC § 103 
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subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by 
the manner in which the invention was made. 

Claims 1, 15, 21 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Eustace UK Patent Application GB 
2,262,633 A. 

As per claim 1, Eustace teaches a data management method 
accessing a storage system by at least two devices coupled to 
the system through a network, the method comprising steps of: 

receiving over the network a request from one of the 
devices, the request identify at least the on of a plurality of 
files on the storage device and source of the request [page 2 
lines 14-19] ; 

selectively servicing, at the storage device, the request 
responsive to configuration data indicating that the device is 
authorized to access [page 2 lines 20-23] , wherein the step of 
selectively servicing comprises verifying that the represented 
source of the request is the one of the at least two devices 
that issued the request [page 5 lines 3-6] . 

Eustace does not teach access to volumes of the storage 
system. Eustace disclose controlling access to files on the 
storage system. However, controlling access to volumes would 
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have been an obvious variation from the teaching of Eustace. It 
is well known in the art to provide volumes on storage system so 
as to provide virtual drives to the requesting devices. It 
would have been obvious for one of ordinary skill in the art to 
provide volumes on the storage system because it would have 
enabled the system to emulate separate storage device for the 
requesting devices. 

Claims 15 and 21 are rejected under similar ratioanle as 
for claim 1 above. 

The following is a repeat of the prior rejection in office 
action paper #28. 

Claims 1-27 and 29-32 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Ericson US patent 6, 061,753. As and 
further in view of Yu US patent 4,919,545. 

As per claim 1, 5-8, and 12, Ericson teaches a data 
management method for managing access to a storage system 
between two devices coupled to the storage system through a 
network [col . 1 "SCSI Fibre Channel bus or Ethernet based local 
area network"], the method comprising: 

Receiving over the network at the storage system a request 
from one of the device [initiator - see col . 3 lines 56-60]; 
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Selectively servicing, at the storage system, the request 
responsive to configuration data indicating that the device 
[initiator] is authorized to access the portion of data [col. 4 
lines 4-25] . 

Ericson does not teach authenticating the request at the 
storage system to authenticate the device issuing the request. Yu 
teaches a security method for authorizing access by a process in 
source node to a resource in the network comprising encrypting an 
identifier of the requesting node using a key associated with the 
node, sending the encrypted key to the resource, decrypting the 
identifier at the resource node to verify the request [see 
abstract] . It would have been obvious for one of ordinary skill 
in the art to combine the teaching of Yu with the storage system 
of Ericson because it would have enable secure access to the 
storage system over a network. 

As per claim 2, Ericson teaches the storage system stores a 
plurality of volumes of data where configuration data stored in 
the storage system in a configuration table [look-up table] 
having identifier and information indicating which volumes are 
available to a device [col. 4 lines 34-54]. 

As per claim 3, it is apparent that the request would be 
forwarded to the storage system over the network. 
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As per claim 4, Ericson teaches using Fibre Channel [col.l 
line 15, col . 6 line 5]. It is apparent that a system with Fibre 
Channel would use Fibre Channel protocol . 

As per claims 15-18, 21-22, 26-27, 29 they are rejected 
under similar rationale as for claims 1-8 above. 

As per claims 11 and 30, Ericson teaches plural disk drives 
[RAID col. 4 lines 5-15] . 

As per claims 13 and 19-20, 24-25, Ericson teaches row with 
bitmap records corresponding to teach device authorized to 
access each of the corresponding ports [col. 4 lines 40-53] . 

As per claims 14 and 23, Ericson teaches precluding service 
request responsive to configuration data [col. 4 lines 47-50]. 

As per claim 9, 10, 31, 32, Ericson does not specifically 
disclose that the device is a host processor or file server. The 
type of device making the request would clearly have been a matter 
of design choice because it does not change the functionality of 
the storage system access control method taught by Ericson. 
Furthermore, Ericson teaches using the system may be used over a 
local area network [col.l lines 15-16] . It is apparent in such a 
usage to have host processor or file server requesting access to 
the storage system. 



Conclusion 
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Applicant's submission of an information disclosure 
statement under 37 CFR 1.97(c) with the fee set forth in 37 CFR 
1.17 (p) on 8/25/03 prompted the new ground of rejection 
presented in this Office action. Accordingly, THIS ACTION IS 
MADE FINAL. See MPEP § 609(B) (2) (i) . Applicant is reminded of 
the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Dung Dinh 
whose telephone number is (703) 305-9655. The examiner can 
normally be reached on Monday-Thursday from 7:00 AM - 4:30 PM. 
The examiner can also be reached on alternate Friday. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Glenton Burgess can be 
reached at (703) 305-4792. 
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Any inquiry of a general nature or relating to the status of 
this application should be directed to the Group receptionist 
whose telephone number is (703) 305-3900. 

Any response to this final action should be mailed to: 
Box AF 

Commissioner of Patents and Trademarks 
Washington, DC 2 0231 

or faxed to: 

(703) 872-9306 

Hand-delivered responses should be brought to Crystal Park II, 
2121 Crystal Drive, Arlington. VA, Fourth Floor (Receptionist) . 



Dung Dinh 
Primary Examiner 
April 28, 2004 




